Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032613a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373032613a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          UeUXAs/LFZxS5fxolb3TYxduHmFWtXUJ15P26b0LoNs=
Subject key identifier:   8A:C3:04:E6:0B:61:34:9D:CD:42:85:E1:74:C9:73:00:90:FD:6E:A4
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       03CEECB30B04E6FC924D1A35C5737740E490D82B
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032613a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:38 +0000
ROA not before:           Sat 29 Jul 2023 16:21:38 +0000
ROA not after:            Sat 27 Jul 2024 16:26:38 +0000
asID:                     269194
IP address blocks:        2804:60d4:702a::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ce:ec:b3:0b:04:e6:fc:92:4d:1a:35:c5:73:77:40:e4:90:d8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:38 2023 GMT
            Not After : Jul 27 16:26:38 2024 GMT
        Subject: CN=8AC304E60B61349DCD4285E174C9730090FD6EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:42:63:d6:8f:95:fc:0c:ba:5b:00:f7:d0:c9:
                    3a:b5:ca:0e:9a:b4:bf:8c:ef:6a:14:cd:d0:91:65:
                    cf:8e:52:65:52:06:c3:09:b2:6b:d5:19:48:c1:13:
                    4a:36:f4:fa:81:82:83:ac:89:5f:8e:58:1a:cd:6e:
                    b1:bc:f9:c2:1a:62:b2:61:73:80:86:62:f4:ba:a9:
                    51:b4:c4:f3:0b:f8:1a:81:68:1e:ad:a4:23:a1:1b:
                    05:00:bf:95:60:17:02:41:18:e0:99:c4:d1:4d:12:
                    2b:ce:44:b5:a3:bf:4d:02:92:43:28:36:8f:22:95:
                    8f:8d:7e:64:9a:68:6f:56:b8:2a:ea:25:c2:d9:2c:
                    42:e7:60:3b:56:10:1e:52:a0:b1:f3:9b:b8:76:17:
                    ce:05:f6:b6:ca:39:da:9b:34:04:74:b6:93:89:dd:
                    2b:07:cd:0b:40:88:01:16:13:68:c5:47:5a:a5:18:
                    f0:ae:af:e2:85:25:ef:80:e6:5e:62:fa:44:b5:eb:
                    46:85:71:0e:55:b2:8b:2e:fb:0f:89:d5:a1:78:ef:
                    fb:3a:4c:95:f1:ef:06:f6:15:2e:c1:1a:27:52:67:
                    b3:3a:cc:7f:e3:fe:f9:6c:ad:d2:4d:38:f0:56:7d:
                    3b:ac:60:fd:02:c6:fa:3e:af:bb:ce:39:e9:06:ad:
                    ab:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C3:04:E6:0B:61:34:9D:CD:42:85:E1:74:C9:73:00:90:FD:6E:A4
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032613a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:702a::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:74:29:92:9f:92:25:a0:e9:d4:c8:8f:79:c2:a9:52:ba:a4:
         a9:dd:e5:b4:bb:15:8c:c2:b7:df:d9:5e:d3:f3:aa:5c:d4:bd:
         a5:38:05:fe:50:b9:1f:a8:bd:b8:75:c3:cc:db:51:e2:92:a1:
         d0:1b:fe:7f:0f:7e:3e:77:06:a8:99:b7:ed:43:c4:cb:de:c6:
         c7:f2:83:f4:d3:73:fd:ca:db:39:dc:3b:e2:1f:22:ca:97:b7:
         76:af:78:a0:2b:62:2d:af:b6:a4:72:5f:bd:9d:57:aa:ea:7f:
         a2:09:38:8b:6b:5e:da:36:3b:45:10:dd:76:7b:99:f0:85:d9:
         6f:ef:57:30:ef:d8:65:c3:d2:cc:0c:60:4e:c6:64:93:4f:52:
         b9:79:c5:a8:27:3d:0d:48:69:b3:59:0c:70:06:37:cf:9e:21:
         be:f7:20:31:5d:14:14:12:38:cf:c9:4a:d8:5a:84:08:41:b0:
         8b:7e:15:bc:0c:74:3b:ed:f8:16:22:17:5d:8a:cf:9d:d8:70:
         6f:7e:83:d7:1f:a1:e0:a5:48:13:72:23:74:64:c8:8b:25:ed:
         42:f3:4c:ff:f8:1e:3a:64:75:77:0f:63:6a:1e:4b:6d:cf:b5:
         85:e7:76:ee:58:b1:52:c3:0d:2b:44:da:7d:da:35:00:e6:f3:
         4d:a3:28:a6
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUA87sswsE5vySTRo1xXN3QOSQ2CswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhGOTlGMkNCQUI4QkUyRUY0OEQ1ODY1NjAwNzIwMjA3
NjRDMTFGMzAeFw0yMzA3MjkxNjIxMzhaFw0yNDA3MjcxNjI2MzhaMDMxMTAvBgNV
BAMTKDhBQzMwNEU2MEI2MTM0OURDRDQyODVFMTc0Qzk3MzAwOTBGRDZFQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QmPWj5X8DLpbAPfQyTq1yg6a
tL+M72oUzdCRZc+OUmVSBsMJsmvVGUjBE0o29PqBgoOsiV+OWBrNbrG8+cIaYrJh
c4CGYvS6qVG0xPML+BqBaB6tpCOhGwUAv5VgFwJBGOCZxNFNEivORLWjv00CkkMo
No8ilY+NfmSaaG9WuCrqJcLZLELnYDtWEB5SoLHzm7h2F84F9rbKOdqbNAR0tpOJ
3SsHzQtAiAEWE2jFR1qlGPCur+KFJe+A5l5i+kS160aFcQ5Vsosu+w+J1aF47/s6
TJXx7wb2FS7BGidSZ7M6zH/j/vlsrdJNOPBWfTusYP0Cxvo+r7vOOekGrauTAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUisME5gthNJ3NQoXhdMlzAJD9bqQwHwYDVR0j
BBgwFoAUuPmfLLq4vi70jVhlYAcgIHZMEfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC9COEY5OUYyQ0JBQjhCRTJFRjQ4RDU4NjU2MDA3MjAyMDc2NEMxMUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4Rjk5RjJDQkFCOEJFMkVG
NDhENTg2NTYwMDcyMDIwNzY0QzExRjMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1cnhWZURBQnB6N3huWGhSY29aYm0zU0dWNUMxcEoyaHRaeXQ2QVNWZUw0LzAv
MzIzODMwMzQzYTM2MzA2NDM0M2EzNzMwMzI2MTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzOTMxMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEYNRwKjANBgkqhkiG9w0BAQsF
AAOCAQEAcHQpkp+SJaDp1MiPecKpUrqkqd3ltLsVjMK339le0/OqXNS9pTgF/lC5
H6i9uHXDzNtR4pKh0Bv+fw9+PncGqJm37UPEy97Gx/KD9NNz/crbOdw74h8iype3
dq94oCtiLa+2pHJfvZ1Xqup/ogk4i2te2jY7RRDddnuZ8IXZb+9XMO/YZcPSzAxg
TsZkk09SuXnFqCc9DUhps1kMcAY3z54hvvcgMV0UFBI4z8lK2FqECEGwi34VvAx0
O+34FiIXXYrPndhwb36D1x+h4KVIE3IjdGTIiyXtQvNM//geOmR1dw9jah5Lbc+1
hed27lixUsMNK0Tafdo1AObzTaMopg==
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:59 2024 by rpki-client on console.sobornost.net